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Amended olain^s follow: 

1. (Currently Amended) A load balancing device for balancing the load across a 
plurality of proxy devices arranged to perform malware scanning of files stored witbin a file 
storage device of a computer network, the computer network having a plurality of client 
devices arranged to issue access requests usifig a dedicated file access protocol to the file 
storage device in order to access files stored on 4e file storage device, the load balancing 
device being arranged so as to intercept access requests issued to the file storage device, and 
comprising: 

a client interface for receiving an access request issued to the file storage device 
using the dedicated file access protocol; 

load balancing logic for ^plying a predetennined load balancing routine to 
determine to which piaxy device to direct that access request and 

a proxy device intei^ce for sending the access request to the proxy device 
determined by the load balancing logic, each proxy device bemg coupled to the file storage 
device; 

wherein said proxy devices are arranged to perform said malware scanning of 
files stored within the file storage device, and the load balancing device determines to 
which of said plurality of proxy devices to direct any particular access request; 

wherein each proxy device comprises: 

(a) a fu-st interface for receiving fi-om the load balancing device an 
access request issued by one of said client devices to said file storage device 
using the dedicated file access protocol; 

(b) a second interface for communicatiflg with the file storage device to 
cause the file storage device to process the access request; 

(c) processing logic for causing selected malware scanning algorithms to 
be executed to determine whether one of t he files identified by the access 
request is to be considered as malware; 

wherein, upon receipt of an access request, tiie processing logic is arranged to 
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deteimine from the access request predetermined attributes, and to send those predetermined 
attributes to the file storage device to enable the file storage device to perfomi a validation 
check, the processing logic only allowing the access request to proceed if the file storage 
device confirms that the client device is allowed to access the file identified by the [[file]] 
access request; 

wherein the tjroxv device comprises a user cache-is utilized for storing the 
predetermined attributes; 

wherein a file cache is arranged only to store files which have been determined not 
to be considered as malwaie . 

2. (Original) A load balancing device as claimed in Qaim 1 , wherein the dedicated file 
access protocol is the Server Message Block (SMB) protocol, and the access requests are 
SMB calls issued to the file storage device. 

3. (Original) A load balancing device as claimed in Claim 1, wherein the dedicated file 
access protocol is the Network File System (NFS) protocol, and the access requests are NFS 
calls issued to the file storage device. 

4. (Original) A load balancing device as claimed in Claim 1 , whaein said load 
balancing routine is arranged, upon receipt of an access request, to poll each of the plurality 
of proxy devices, and to cause the access request to be sent to the first proxy device in said 
plurality that replies with an indication that it is available to handle the access request. 

5. (Original) A load balancing device as claimed in Claim 1, wherein said load 
balancing routine is arranged to apply a "round robin"' system of allocation of access 
requests to proxy devices in said plurality so as to evenly distribute the access requests 
amongst the plurality of proxy devices. 

6. (Original) A load balancing device as claimed in Claim 1 , wherein the proxy device 
interfece is arranged to receive a ready signal from each proxy device in said plurality 
indicating whether that proxy device is ready to receive an access request, the load 



PA(£ 6128' RCVD AT 4/1912006 3:21:26 PM [Eastern Daylight Timel'SW^ 



APR. 19. 2006 12:33PM ZILKA-KOTAB, PC 



NO. 2655 P. 7 



"4- 

balancing joutine being ananged to refer to said ready signals when determining to which 
proxy device to direct a particular access request. 

7. (Original) A load balancing device as claimed in Claim 1 , wherein each device in 
the computernetwork is assigned an identifier, and the load balancing device is assigned the 
same identifier as is assigned to the file storage device, the client intetface being connectable 
to a communication infrastructure of the computer network to enable communication 
between the load balancing device and said client devices, whilst the pharality of proxy 
devices are connectable to flie proxy device interfece and the file storage device is 
connectable to each proxy device, such that the file storage device is only accessible by said 
client devices via said load balancing device and one of said proxy devices. 

8. (Original) A load balancing device as claimed in Claim 7, wherein aplviiality of file 
storage devices may be connected to each of said proxy devices, each file storage device 
having a dififerait identifier, and the load balancing device being assigned multiple 
identifiers coiresponding to the identifiers of the file storage devices connected to the 
plurality of proxy devices, the client interfecc being configured to teccive any access 
requests issued to one of said file storage devices connected to tfie plurality of proxy 
devices. 

9. (Original) A load balancmg device as claimed in Claim 1 , wherein each device in 
the computernetwork is assigned an identifier, the load balancing device being assigned a 
unique identifier different to flie identifier of the file storage device, the client devices, the 
load balancing device and ihe file storage device being connectable to a communication 
infiastructure of the computer network, the client devices being configured such that access 
requests issued by (he client devices are routed to the load balancing device, and the file 
storage device being configured to return each processed access request to the proxy device 
firom which that access request was received. 

10. (Cancelled) 
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1 1 . (Previously Presented) A balanced proxy system as claimed in Claim 1 , wherein the 
processing logic is responsive to configuration data to determine which malware scanning 
algorithms should be selected for a particular file, each proxy device further comprising a 
scanning engine to execute the malware scanning algorithms selected by the processing 
logic. 

12. (Currently Amended) A balanced proxy system as claimed in Claim 1 , wherein each 
proxy device further comprises [[aUflas file <^he for storing files previously accessed by the 
client devices, upon receipt of an access request identiiying a file to be read fiom the file 
storage device, the processing logic being arranged to determine whether the iUe identified 
by the access request is stored in the file cache and if so to return the file to the client device 
via the load balancing device without communicating with the file storage dervice via the 
second inter&ce. 

13. - 15. (Cancelled) 

1 6. (Currently Amwded) A method of operating a load balancing deyice to balance the 
load across a plurality of proxy devices arranged to perform malware scanning of files 
stored within a file storage device of a computer network, the computer network having a 
plurality of chent devices arranged to issue access requests using a dedicated file access 
protocol to the file storage device in ord^ to access files stored on the file storage device, 
the load balancing device being ananged so as to intercept access requests issued to the file 
storage device, and the method comprising the steps of: 

(a) receiving an access request issued to the file storage device using the dedicated file 
access protocol; 

(b) applying a predetermined load balancing routine to determine to which proxy device 
to direct that access request; and 

(c) sending the access request to the proxy device determined at said step (b), each 
proxy device being coxipled to the file storage device; 

wherein said proxy devices are arranged to perform said malware scanning of 
flies stored within the file storage device, and the load balancing device determines to 
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which of said plurality of proxy devices to direct any particular access request; 
wherein each proxy device comprises: 

(a) a lirst interface for receiving from the load balancing device an 
access request issued by one of said client devices to said file storage device 
using the dedicated file access protocol; 

(b) a second interface for communicatbg with the file storage device to 
cause the file storage device to process ttie access request 

(c) processing logic for causing sdected malwate scanning algorithms to 
be executed to detemune whether one of t he fileg identified by the access 
request is to be considered as malware; 

wherein, upon receipt of an access request, the processing logic is arranged to 
determine fix>m the access request predetermined attributes, and to send those predetennined 
attributes to the file storage device to enable the file storage device to perfonn a validation 
check, the processing logic only allowing the access request to proceed if the file storage 
device confirms that the client device is allowed to access the file identified by the [[file]] 
access request; 

whaein the proxy d evice comprises a user cach&is utilized for storing the 
predetemiiaed attributes; 

wherein a file cache is arranged onlv to store files which have been determined not 
to be considered as malware . 

1 7. (Original) A method as claimed in Claim 1 6, wherein the dedicated file access 
protocol is fte Server Message Block (SMB) protocol, and the access requests are SMB 
calls issued to the file storage device. 

1 8. (Original) A method as claimed in Claim 16, wherein the dedicated file access 
protocol is the Network File System (NFS) protocol, and the access requests are NFS calls 
issued to the file storage device. 

1 9. (Original) A method as claimed in Claim 1 6. wherein said load balancing routine is 
arranged, upon receipt of an access request, to poll each of the plurality of proxy devices. 
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and to cause the access request to be sent to the first proxy device in said pluiality that 
replies with an indication that it is available to handle the access request. 

20. (Original) A method as claimed in Claim 1 6, wherein said load balancing routine is 
anranged to apply a "round robin" system of allocation of access requests to proxy devices in 
said plurality so as to evenly distribute the access requests amongst the plurality of proxy 
devices. 

21. (Original) A method as claimed in Claim 1 6, wherein the load balancing device is 
arranged to receive a ready signal from each proxy device in said plurality indicating 
whether that proxy device is ready to receive an access request, the load balancing routine 
bemg arranged to refer to said ready signals when determinmg to ^Nhich proxy device to 
direct a particular access request. 

22. (Original) A method as clahned in Claim 16, wherein each device in the computer 
network is assigned an identifier, and the load balancing device is assigned die same 
identifier as is assigned to ttie file storage device, the method comprising the steps of: 

counecting a client intexf ace of the load balancit^ device to a communication 
infiasttucture of the computer network to enable communication between the load balancing 
device and said client devices; 

connecting the plurality of proxy devices to a proxy device interface of the load 
balancmg device; and 

connecting the file storage device to each proxy device, such that the file storage 
device is only accessible by said client devices via said load balancing device and one of 
said proxy devices. 

23. (Original) A method as claimed in Claim 22, wherein a plurality of file storage 
devices may be connected to each of said proxy devices, each file storage device having a 
different identifier, and the load balemcing device being assigned multiple identifiers 
corresponding to the identifiers of the file storage devices connected to the plurality of proxy 
devices, the cUent interface being configured to receive any access requests issued to one of 
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said file storage devices connected to the plurality of proxy devices. 

24. (Original) A method as claimed in Claim 1 6, wherein each device in the computer 
network is assigned an identifier, the load balancing device being assigned a imique 
identifier different to the identifier of the file storage device, the method comprising the 
steps of: 

connecting the client devices, the load balancing device and the file storage device to 
a communication infiastruoture of the computer network; 

configuring the client devices such that access requests issued by the client devices 
are routed to the load balancing device; and 

configuring the file storage device to return each processed access request to the 
proxy device fi-om which that access request was received. 

25. (Cancelled) 

26. (Previously Presented) A method as claimed in Claim 1 6, wherein said step (iii) 
comprises the steps of: 

responsive to configuration data, determining which malware scanning algorithms 
should be selected for a particular file; and 

employing a scanning engine to execute the malware scanning algorithms selected 
by said deteimming step. 

27. (Currently Amended) A method as claimed in Claim 16, wherein each pit>xy device 
is anranged to perform the fiirther steps of: 

storing within [[a]]fte file cache files previously accessed by the client devices; 

upon receipt of an access request identifying a file to be read from the file storage 
device, determining whether the file identified by the access request is stored in the file 
cache and if so to return the file to the client dcfvice via the load balancing device without 
communicating with the file storage device. 

28. -30. (Cancelled) 
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3 1 . (Currently Amended) A computer program embodied in a computer-readable 
medium for configuring a load balancing device to perform a meliiod of balancing the load 
across a plurality of proxy devices arranged to perforin malwaie scanning of files stored 
within a file storage device of a computer network, the computer network having a plurality 
of client devices arranged to issue access requests using a dedicated file access protocol to 
the file storage device in order to access files stored on the file storage device, the load 
balancing device being arranged so as to intercept access requests issued to the file storage 
devices and the computer program embodied in a computer-readable medium comprising: 

(a) client interface code operable to receive an access request issued to the file storage 
device using the dedicated file access protocol; 

(b) load balancing code operable to ^ly a predetennined load balancing routine to 
detemiine to which proxy device to direct ^t access request; and 

(c) proxy device interface code operable to send the access request to the proxy device 
determined by the load balancing logic, each proxy device being coupled to the file storage 
device; 

wherein said proxy devices are arranged to perform said malware scanning of 
files stored within the file storage device, and the load balancing device determines to 
which of said plurality of proxy devices to direct any particular access request; 

wherein each proxy device comprises: 

(a) a first interfece fox receiving firom the load balancing device an 
access request issued by one of said client devices to said file storage device 
using the dedicated file access protocol; 

(b) a second interface for communicating with the file storage device to 
cause the file storage device to process the access request; 

(c) processing logic for causing selected malware scanning algorithms to 
be executed to determine whether one of t he files identified by the access 
request is to be considered as malware; 

wherein, upon receipt of an access request, the processing logic is arranged to 
determine from the access request predetermined attributes, and to send those predetermined 
attributes to the file storage device to enable the file storage device to perform a validation 
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check, the processing logic only allowing the access request to proceed if the file storage 
device confirms that the client device is allowed to access the file identified by the [[file]] 
access request; 

wherein the nroxv device comprises a user oaohe49 utilized for storing the 

predetermined attributes! 

wherein a file cache is ananged onlv to store fi les which have been determined not 

to be con.*sidered as malware . 

32. (Pitviously Presented) A computer program embodied in a computer-readable 
medium as claimed in Claim 31, wherein the dedicated file access protocol is the Server 
Message Block (SMB) protocol, arid the access requests are SMB calls issued to the file 
storage device. 

33. (Previously Presented) A computer program embodied in a compuler-readable 
medium as claimed in Claim 3 1 , wAierein the dedicated file access protocol is the Network 
File System (NFS) protocol, and the access requests are NFS calls issued to the file storage 
device. 

34. (Previously Presented) A computer program embodied in a computer-readable 
medium as claimed in Claim 3 1, wherein said load balancing routine is arranged, upon 
receipt of an access request, to poll each of the pluraUty of proxy devices, and to cause the 
access request to be sent to the first proxy device in said plurality that replies with an 
indication that it is available to handle the access request. 

3 5 . (Previously Presented) A computer program embodied in a compute-readable 
medium as claimed in Claim 3 1 , wherein said load balanomg routine is arranged to apply a 
^'round robin" system of allocation of access requests to proxy devices in said plurality so as 
to evenly distribute the access requests amongst the plurality of proxy devices. 

36. (Previously Presented) A computer program embodied in a computer-readable 
medium as claimed in Qaim 31, wherein the load balancing device is arranged to receive a 
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ready signal from each proxy device in said plvirality indicating whetfier tiiat proxy device is 
ready to receive an access request, the load balancing routine being arranged to refer to said 
ready signals when determining to which proxy device to direct a particular access request 

37. (Previously Presented) A computer program embodied in a computer-readable 
nxedium as claimed in Claim 31, wherein each device in the computer network is assigned 
an identifier, and the load balancing device is assigned the same identifier as is assigned to 
the file storage device, a client inteifece of the load balancing device being connectable to a 
communication infrastructure of tlie computer network to enable communication between 
the load balancing device and said client devices, whilst the plurality of proxy devices are 
coixaectable to a proxy device interface of the load balancing device and the file storage 
device is connectable to each proxy device, such ihat the file storage device is only 
accessible by said client devices via said load balancing device and one of said proxy 
devices. 

3 8. (Previously Presented) A computer program embodied in a computer readable 
medium as claimed in Claim 37, v^lierein a plurality of file storage devices may be 
connected to each of said proxy devices, each file storage device having a diiferent 
identifier, and the load balancing device being assigned multiple identifiers corresponding to 
the identifiers of the file storage devices connected to the plurality of proxy devices, the 
client intetface code being operable to receive any access requests issued to one of said file 
storage devices coimected to die plurality of proxy devices. 

39. (Previously Presented) A computer program embodied in a computer-readable 
medium as claimed in Claim 3 1 , wherein each device in the computer network is assigned 
an identifier, the load balancing device being assigned a unique identifier different to Ihe 
identifier of the file storage device, the cHent devices, the load balancing device and the file 
storage device being connectable to a communication infrastructure of the computer 
network, the chent devices being configured such that access requests issued by tite client 
devices are routed to the load balancing device, and the file storage device being configured 
to return each processed access request to the proxy device from which that access request 
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was received. 

40. (Canceled) 

41 . (Pteviously Presented) A computer program embodied in a computer-readable 
medium as claimed in Claim 31, wbeiein said algorithm invokinB code is operable to 
detem:miei responsive to configuration data, ^vhich malwaie scamiing algorithms should be 
selected for a particular file, and the second computer program product jEurther comprises 
scanning engine code responsive to said algorithni invoking code and operable to execute 
the tnalware scanning algorithms selected by said algorithm invoking code. 

42. (Currently Amended) A computer program embodied in a computer-feadable 
medium as claimed in Claim 31, wherein said second computer program embodied in a 
computer-readable medium further comprises: 

caching code operable to store within [[a]]die file cache files previously accessed by the 

client devices; 

the receptioii code being operable, upon receipt of an access request identifying a file to be 
read fi-om the file storage device, to determine whether the file identified by the access 
request is stored in the file cache and if so to return the file to the client device via the load 
balancing device without communicating with the file storage device. 

43. -45. (Cancelled) 

46. (New) A load balancing device as claimed in Claiixi 1 , wherein the access requests 
are buffered \5^en the proxy device is busy and unable to process the access requests 
utilizing the load balancing device. 

47. (New) A load balancing device as claimed m Claim 1 , wherein the access requests 
are buffered vviien the proxy device is busy and unable to process flie access requests 
utilizing the proxy device. 
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48. (New) A load balancing device as claimed in Claim 1, wherein the load balancing 
device maintains an additional cache including details about ihe access requests utilizing the 
proxy devices. 

49. (New) A load balancing device as claimed in Claim 48, wherein the additional cache 
is utilized to sdlocate subsequent access requests for a particular file to one of the proxy 
devices that handled a previous access request for flie particular file. 

50. (New) A load balancing device as claimed in Claim 1 , wherein the malware 
scanning is not performed when the file has already been scanned. 

5 1 . (New) A load balancing device as claimed in Claim 1 , wherein the predetennmed 
attributes in the user cache aie re-used by the proxy device during the processing of the 
access request 
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